doc: enhance best practices for cluster-wide resources reconciliation

[ionicsolutions]

Problem Statement

The description of options for controlling the reconciliation and CRD installation of cluster-wide resources in the "Security Best Practices" guide is incomplete.

• If the CRD installation is disabled in the Helm chart but the reconcilers are not, the core controller produces errors in its logs because it cannot find the CRDs.
• The docs don't explain how to disable reconciliation in the Helm chart. There's an easy-to-miss naming inconsistency between the Helm chart key for ClusterSecretStore CRD installation and reconciliation (the latter following the name of the core controller flag rather than the resource name), which makes listing the options in full especially useful.
• The core controller flags have to be set to false to disable reconciliation.

Related Issue

N/A

Proposed Changes

I've completed the description by adding missing options. Instead of running make test, I've built and verified the generated docs.

Checklist

• I have read the contribution guidelines
• All commits are signed with git commit --signoff
• My changes have reasonable test coverage
• All tests pass with make test
• I ensured my PR is ready for review with make reviewable

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[moolen]

Hey! Thank you for fixing the documentation on that end, very much appreciated 🙇